| Package | Affected versions | Patched versions |
|---|---|---|
| diaenergie | < 1.8.02.004 | 1.8.02.004 |
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free